companyArch Linux
suspectedhighSupply chainFirst reported Oct 15, 2026
Arch Linux: malicious AUR packages impersonated yay and paru helper tools
A threat actor uploaded malicious packages to the Arch User Repository that impersonated the popular AUR helpers yay and paru. The packages reportedly delivered malware with root privileges.
Members only
The full record: the timeline and 1 linked report
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment Arch Linux — or anything else you track — is hit again
A free account is all it takes — no card, one minute.